Privacy Policy — Cili88

01Introduction

Cili88 ("we", "us", "our", or "the Platform") operates the online gaming and sports betting platform accessible at cili88.lat. This Privacy Policy governs the collection, processing, storage, disclosure, and protection of personal data relating to individuals who access or use our Platform, including registered account holders and visitors.

By creating an account, making a deposit, or otherwise engaging with any feature of the Cili88 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein. If you do not agree with any part of this Policy, you should not use the Platform or provide us with your personal information.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together constitute the full framework governing your relationship with Cili88.

02Definitions

For the purposes of this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably identify a natural person, either directly or in combination with other data. This includes name, identification number, email address, contact number, financial information, IP address, and device identifiers.
• "Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.
• "Data Controller" means Cili88, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Cili88, including payment gateway operators, KYC verification providers, and cloud infrastructure partners.
• "User" or "Player" means any individual who accesses the Platform, registers an account, or otherwise interacts with Cili88's services.
• "Cookies" means small text files placed on your device by the Platform to facilitate session management, analytics, and personalisation.

03Data We Collect

Cili88 collects the following categories of Personal Data in connection with the operation of our Platform:

3.1 Identity & Registration Data

• Full legal name as it appears on your government-issued identification document
• Date of birth (for age verification — minimum 21 years required)
• Nationality and country of residence
• Malaysian identity card number (MyKad) or passport number
• Username and encrypted password

3.2 Contact Data

• Email address
• Mobile telephone number
• Residential or mailing address, including city (e.g., Kuala Lumpur, Penang, Johor Bahru, Petaling Jaya, Shah Alam)

3.3 Financial & Transaction Data

• Payment method details, including e-wallet account identifiers (Touch 'n Go eWallet, Boost, GrabPay), bank account numbers, FPX and DuitNow reference identifiers, and cryptocurrency wallet addresses (BTC/USDT)
• Deposit and withdrawal transaction history, including amounts in Malaysian Ringgit (MYR), timestamps, and processing status
• Betting and gaming history, including wager amounts, game selections, and outcomes
• Bonus and promotion claim history

3.4 Technical & Usage Data

• IP address, device type, browser type and version, and operating system
• Session data, including login times, session duration, and in-session activity logs
• Pages visited, features accessed, and navigation paths within the Platform
• Geolocation data at the jurisdiction level (country/region), derived from IP address

3.5 Communications Data

• Contents of communications submitted to our support team via live chat or email
• Records of complaints, dispute submissions, and their resolutions
• Marketing preference data, including email opt-in and opt-out status

04How We Collect Your Data

Cili88 collects Personal Data through the following means:

• Directly from you: Information you provide during account registration, KYC verification, deposit or withdrawal requests, support interactions, and completion of any forms on the Platform.
• Automatically: Technical and usage data collected via cookies, web beacons, server logs, and similar tracking technologies when you access or interact with the Platform.
• From third parties: Identity and fraud-screening data received from KYC verification partners; payment verification data from payment gateway operators; fraud and anti-money laundering (AML) screening data from specialised compliance service providers.

05Data Processing & Use

Cili88 processes your Personal Data for the following purposes:

Purpose	Data Categories Used
Account registration and management	Identity, contact, authentication data
Age and identity verification (KYC)	Identity data, government ID documents
Processing deposits and withdrawals	Financial data, payment method details
Delivering gaming services and resolving bets	Identity, gaming history, financial data
Customer support and dispute resolution	Identity, contact, communications data
Fraud detection and anti-money laundering compliance	Identity, financial, technical data
Responsible gambling monitoring and intervention	Gaming history, financial data, usage data
Platform analytics and product improvement	Technical and usage data (anonymised where possible)
Marketing communications (where opted in)	Contact data, gaming preferences
Legal and regulatory compliance	All categories as required

06Legal Basis for Processing

Cili88 processes your Personal Data on the following legal bases:

• Contractual necessity: Processing required to perform the contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable law, including anti-money laundering (AML) regulations, Know Your Customer (KYC) requirements, and regulatory reporting obligations.
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, Platform security, and service quality improvement, where such interests are not overridden by your fundamental rights.
• Consent: Processing based on your explicit consent, including direct marketing communications. You may withdraw this consent at any time by contacting us or adjusting your notification preferences in account settings.

07Data Sharing & Disclosure

Cili88 does not sell, rent, or disclose your Personal Data to third parties for their own commercial purposes. We may share your data with the following categories of recipients solely for the purposes described in this Policy:

• Payment processors and e-wallet operators: Including providers of Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency processing services, for the purpose of executing your transaction instructions.
• KYC and identity verification providers: Third-party partners engaged to verify your identity, age, and document authenticity as part of our legal compliance programme.
• Fraud prevention and AML screening services: Specialist compliance service providers engaged to assist in detecting and preventing fraud and money laundering activity on the Platform.
• Cloud infrastructure and hosting providers: Third-party technology partners who host and process Platform data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Where we are required by law, court order, or regulatory direction to disclose your data to a competent authority.
• Professional advisers: Legal, accounting, and audit professionals subject to professional confidentiality obligations, where necessary for compliance or corporate purposes.

08Cookies & Tracking Technologies

Cili88 uses cookies and similar technologies to operate and improve the Platform. The following categories of cookies may be placed on your device:

• Strictly necessary cookies: Essential for core Platform functions including authentication, session management, and security. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Store your preferences, such as language settings and display options, to enhance your experience across sessions.
• Analytics cookies: Collect anonymised or aggregated usage data to help us understand how Players interact with the Platform, identify usability issues, and prioritise product improvements.
• Marketing cookies: Track visit patterns and engagement to help us deliver more relevant promotional communications to Players who have opted in to marketing. These are only activated where you have provided consent.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may limit the functionality of the Platform. We do not use cookies to track your activity on third-party websites unrelated to Cili88.

09Data Retention

Cili88 retains Personal Data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. Our standard retention guidelines are as follows:

• Account and identity data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Financial transaction records: Retained for a minimum of seven (7) years from the date of the transaction, in compliance with applicable financial regulations.
• Communications and support records: Retained for three (3) years from the date of the communication, or longer where required in connection with an ongoing dispute or legal proceeding.
• Marketing preference data: Retained until you withdraw consent or we have reasonable grounds to believe the data is no longer current or relevant.
• Technical and usage data: Typically retained in identifiable form for up to twenty-four (24) months, after which it may be retained in aggregated, anonymised form for analytical purposes.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures.

10Data Security

Cili88 implements a comprehensive suite of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data fields at rest within our database infrastructure
• Two-factor authentication (2FA) available for all Player accounts
• Role-based access controls limiting staff access to Personal Data on a strict need-to-know basis
• Regular security audits, penetration testing, and vulnerability assessments conducted by independent third parties
• Intrusion detection systems and real-time monitoring for anomalous access patterns
• Documented incident response procedures with defined notification timelines in the event of a data breach

While we employ industry-standard security practices, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security and encourage all Players to use strong, unique passwords and to enable 2FA on their accounts.

11User Rights

Subject to applicable law and our legal obligations, you have the following rights in relation to your Personal Data held by Cili88:

• Right of access: You may request a copy of the Personal Data we hold about you, along with information about how it is used and with whom it is shared.
• Right to rectification: You may request correction of any inaccurate or incomplete Personal Data held about you.
• Right to erasure: You may request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to restriction: You may request that we limit the processing of your data in certain circumstances, such as while a dispute regarding accuracy is being resolved.
• Right to data portability: You may request a copy of Personal Data you have provided to us in a structured, commonly used, machine-readable format, where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to object: You may object to processing based on legitimate interests, including profiling for direct marketing purposes.

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) calendar days. We may require proof of identity before processing your request.

12Children's Privacy

Cili88 strictly prohibits access to the Platform by any person under the age of 21. We do not knowingly collect, process, or retain Personal Data from individuals under 21 years of age. All accounts are subject to mandatory age verification as part of our KYC programme.

If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that data and close the associated account, and will return any deposited funds to the original payment source following verification. If you believe a minor has created an account on the Platform, please notify us immediately at [email protected].

13Cross-Border Data Transfers

As an online Platform serving Malaysian players, Cili88 may transfer your Personal Data to servers, data processors, or service providers located outside Malaysia, including within the licensing jurisdiction under which we operate. Where such transfers occur, Cili88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Malaysian data protection principles, including contractual protections with all Data Processors receiving your data.

We do not transfer your Personal Data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual safeguards.

14Amendments to This Policy

Cili88 reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via email notification, an in-platform alert, or a prominent notice on this page, with a minimum of 7 days' prior notice before the amended Policy takes effect.

Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We recommend reviewing this page periodically. The date of the most recent revision is displayed at the top of this Policy.

15Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your Personal Data, please contact Cili88's Data Protection team:

• Email: [email protected]
• Subject line: Privacy Request — [Your Account Username]
• Live Chat: Available 24/7 via the in-platform chat widget
• Response time: Within 30 calendar days of receipt of a verified request

Our support team is staffed by agents familiar with Malaysian data privacy expectations and is available in English around the clock, including Malaysian public holidays.